CLAIMS 



Having thus described our invention, what we claim as new and desire to 
secure by Letters Patent is as follows: 



1. A method of conducting busines 



s electronically between a first party and a 



second party, comprising: 

providing a third party who knows an identity of the first party but no 
privacy-compromising information regarding a proposed electronic business 
transactio^between the first and se:ond parties; and 

conducting the electronic business transaction between said first and 
second parties through the third pa ty such that said identity of said first party is 
kept from the second party. 

2. A method of performing electa nic commerce without a candidate customer 
being forced to disclose private dat|i together with an identity of the candidate 
customer, to a business entity requihng said private data, said method comprising 

establishing an intermediarM relationship with a third party between the 
candidate customer and the businesp entity; 

providing a proprietary itenl to said customer such that the customer can 
be identified as a legitimate owner \f the item without revealing the identity of 

said customer; and 
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performing electronic commerce between said customer and said business 
entity through said third party, utilizing said proprietary item, such that an identity 
of said customer is kept from^said business entity. 



3. The method according to claim 2 5 wherein the customer establishes the 
relationship with the third party which serves for all further engagements with 
business entities. 



4. The method according to claim 2, wherein a Fourth Party delivers to the 
customer a portable device P(C) which carries biometrics of the customer such 
that the customer can be identified as a legitimate owner of the portable device 
P(C) without revealing the identity of said customer. 



5. The method according to claim 4, wherein the device P(C) delivers a number 
S(C) at each transaction, and the number S(C) is readable from the portable device 
P(C) only in the presence of the customer. 



6. The method according to claim 5, 



wherein said portable device P(C) generates 



wherein for at least one of each new 
customer, a new number n is chosen 



numbers S(C,n), where n is an intege r belonging to a set {1, 2, ... 5 N}, and 



customer and said at least one of each 
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msiness unit and other partner of the 
or all further transaction between the 
new business unit and other partner. 
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7. The method according to clain 1 
verifiers Vj, j = 1, 2, . . .N, , 

wherein said verifiers are 



2, wherein the business entity chooses a set of 



connectable to a network so as to 



privacy protection. 



8. The method according to clain: 



each equipped to verify portable devices, and are 
( utput information to the third party T using 



2, wherein when deciding to register with a 



business entity, the customer senc s to the third party an application and a software 
to encrypt the application using a public key pul(I) where (Prl(I),pul(I)) is a 
public signature scheme of the bi siness entity, 

said software further allowing the customer to compute a public signature 
scheme (Pr2(I,C),pu2(I,C)), said application being provided over a network 
connected to said business entity. 



9. The method according to claim 8, wherein the application has a header having 
identification data about the customer written together with a number S(C) 
associated with the proprietary item, and a body where personal or other data 
associated with said customer and pu2(I,C) are written after encryption using 
pul(I). 



10. The method according to claim 9, wherein when receiving the application, the 

third party replaces the header with a number N(T,C,I) which is sent to insurance 
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entity with body of the completed application, wherein said business entity 
decrypts body and decides on an offer price if any, and 

wherein a decision is communicated to the business entity after encryption 
using pu2(I,C) together with N(T,C,I), and the business entity forwards 
pu2(I,C)(D) to the customer. 



e method according to<5mim 2, wherein, before sending application to the 
usiness entity, the cxmomev accesses one or more verifiers Vj, and wherein the 
customer identifies itself to each verifier Vj using a number S(C) associated with 
the propfietary item, and requests Vj to send S(C) to the business entity, together 
th data verified by Vj. 



K£ The method ac cQrdinfr4€^daim 1 1, wherein communication ttrtheJ^iness 
entity is perfonngdjby^p endin^to the number S(C) thc rc tevanr35aencrypted 
using 



13. The method according to /claim 1 1 , wherein a link between the third party 

and the business entity is provided by the third party posting all completed 

applications on a dedicated vjforld-wide-web (WWW) page after removing clear 

identification thereof, and tagging by a number N(T,C, I) which has a redundancy 

allowing the business entity, but no other party, to recognize this number as a 

number associated with tl^e business entity. 
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14. The method according to claim 2, wjifrein a payment between a business 
entity and a third party is documented by the paying party by attaching a tagging 
number to the payment, 

said tagging number being communicated to a bank of the paying party, 
and accompanies^the transaction order to the bank of the payee, and 

wherein the paying bank accepts the money transfer in exchange of the tag 
coded using a private key of the payee's bank. 



1 5 . The method according to 
customer and the business enti 
interacts with the customer desp 



cljaim 2, wherein, with a relationship between the 
tjj previously established, the business entity 
ite not knowing an identity of customer. 



. The method according to claim 15, wherein, when submitting a transaction 



W request, 



the customer a ddresses the transaction request to the third party, after 



selectively consulting 



ivith one or more verifiers Vj. 
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17. The method according to claim 1 6, wherein, after processing the transaction 
request, the business entity sends a communication encrypted using a public key 
pu2(I,C)), to the third party, and said third party transmits the encrypted 
communication to the customer. 
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18. The method according to claim 1 7, wherein said communication includes 
one of a payment, a request for further data, and a declination of the transaction 
request. 

19. The method according to claim 2, further comprising selecting a purveyor of 
good or services as the business entity. 

20. The method according to claim 2, wherein the proprietary item comprises a 
device P(C) which delivers a number S(C) at each transaction, and the number 
S(C) is readable from the device P(C) only under authorization from the customer. 

21 . The method according to claim 2, wherein the business entity chooses a set 
of verifiers Vj, where j = 1, 2, . . .N. 

22. The method according to claim 2, wherein said item carries biometrics of the 
customer. 

23. The method according to claim 2, wherein said third party receives the 
identity of the customer, and said business entity receives information other than 
the identity of the customer. 
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application is taken electronical!; 



24. A method of selecting a pun eyor of goods or services in a confidential 
manner over a network, comprising: 

sending, by a customer, an application to a third party, wherein said 

from a business entity, along with a code which 
allows encrypting the applicationlusing a public key pul(I), \^^(Erl(I) ? pylQ)X ^ 
is a public signature scheme of business entity, said code allowing the customer to 
compute a public signature schema (Pr2(I,C),pu2(I,C)). 



25. The method according to claim 24, wherein the application includes a 
header where identification data about the customer is written together with a 
number S(C), and a body where other data of the customer and the key pu2(I,C) is 
written after encryption using the public key pul(I). 



26. The method according to claim 25, wherein when receiving the application, 
the third party replaces the header with a number N(T,C,I) which is sent to the 
business entity with the completed body of the application. 



27. The method according to claim 26, wherein the business entity decrypts the 

body using Prl(I)(pul(DATA)) and makes a decision D on whether to proceed 

and if so, an offer price, and 

wherein the decision D is communicated to the third party after encryption 

using public key pu2(I,C) together with the number N(T,C 5 I), and 
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wherein the third party, using the number N(T,C,I) to recognize the 
customer, sends the public key pu2(I,C)(D) to the customer, who decrypts using a 
private key Pr2(I,C) to obtain 

D = Pr2(I,C)(pu2(I,C)(D)). 

28. The method according to claim 24, wherein before sending application to 
the business entity, the customer accesses one or more verifiers. 

29. The method according to claim 24, further comprising: 

establishing a customer-purveyor contact over the network. 

30. The method according to claim 29, wherein said establishing comprises: 
when submitting a transaction request, encrypted using pi 1(1), the 

customer addresses the request to the third party, after selectively accessing one or 
more verifiers Vj; 

transmitting, by the third party T, the transaction request to the business 
entity after removing a header and attaching a number 
Ntransaction(T,C,I,Transaction) thereto; and 

processing the request by the business entity. 

3 1 . The method according to claim 30, wherein said establishing further 

comprises: 
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sending, by the business entity, a communication to the third party. 



32. The method according to claim 3 1 , said establishing further comprising; 

transmitting said communication, after or while processing the transaction 
request, to the third party, said request being encrypted using the public key 
pu2(I,C); and 

transmitting, by the third party, the communication to the customer. 



33. The method according to claim 3 1 , wherein the communication includes one 
of a payment, a request for further data, and a declination of part or all of the 



transaction. 



34. A system for conducting bu 
second party, comprising: 

means for providing to s 



siness electronically between a first party and a 



privacy-compromising 
transaction between the first an< 



third party a n identit y,of-the^first party but no 
information regarding a proposed electronic business 
second parties; and 

i electronic business transaction between said first 



means for conducting th 
and second parties through the tpird party such that said identity of said first party 
is kept from the second party. 
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35. A signal-bearing medium tangibly embodying a program of machine-readable 
instructions executable by a digit il processing apparatus to perform a method for 
conducting business electronically between a first party and a second party, said 
method comprising: 

providing to a third party an identity of the first party but no 
privacy-compromising information regarding a proposed electronic business 
transaction between the first antd second parties; and 

conducting the electror ic business transaction between said first and 
second parties through the thiijd party such that said identity of said first party is 
kept from the second party. 



36. A system for performing 
being forced to disclose privat 



; electronic commerce without a candidate customer 
data together with an identity of the candidate 
customer to a business entity requiring said private data, said system comprising: 

means for establishing an intermediary relationship with a third party 
between the candidate customer and the business entity; 

a proprietary item provided to said customer such that the customer can be 
identified as a legitimate owner ^f the item without revealing the identity of said 
customer; and 

means for performing electronic commerce between said customer and 

said business entity through said thkd party, utilizing said proprietary item, such 

that an identity of said customer is k^pt from said business entity. 
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37. A signal-bearing medium tangibly embodying a program of machine- 
readable instructions executable py a digital processing apparatus to perform a 
method of performing electronic commerce without a candidate customer being 
forced to disclose private data together with an identity of the candidate customer 
to a business entity requiring said private data, said method comprising: 

establishing an intermedia y relationship with a third party between the 
candidate customer and the business entity; 

providing a proprietary iter 1 to said customer such that the customer can 
be identified as a legitimate owner of the item without revealing the identity of 
said customer; and 

performing electronic commerce between said customer and said business 
entity through said third party, utilising said proprietary item, such that an identity 



of said customer is kept from said business entity. 
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